From 5c7b97a0cff1b6d5725db14f08b91e3ca0442818 Mon Sep 17 00:00:00 2001
From: Yuriy Kirillov <ykirillov@icloud.com>
Date: Sun, 30 Aug 2026 23:21:00 +0200
Subject: [PATCH] chore: retire semaphore

---
 README.md                         |  1 -
 RETIRED.md                        |  5 +++++
 apps/semaphore/docker-compose.yml | 33 -------------------------------
 3 files changed, 5 insertions(+), 34 deletions(-)
 delete mode 100644 apps/semaphore/docker-compose.yml

diff --git a/README.md b/README.md
index 02ca3fe..27db682 100644
--- a/README.md
+++ b/README.md
@@ -87,7 +87,6 @@ flightdeck/
 |------|---------|
 | **traefik** | Reverse proxy & SSL |
 | **cloudflared** | Optional Cloudflare Tunnel into traefik |
-| **semaphore** | Ansible UI & task runner |
 | **twofauth** | Two-factor auth manager |
 | **gatus** | Status page & health checks |
 | **beszel** | Server monitoring |
diff --git a/RETIRED.md b/RETIRED.md
index 3486dde..af2e875 100644
--- a/RETIRED.md
+++ b/RETIRED.md
@@ -8,3 +8,8 @@ Apps removed from the active stack. Technical details are recoverable from git h
 
 - **Retired:** 2026-08-21
 - **Reason:** Redundant once the deploy pipeline itself became idempotent — every deploy already runs `docker compose pull && up -d` for every app, which re-pulls and reconciles on its own. A separate container polling for image updates added nothing except another thing needing Docker socket access on every host.
+
+## semaphore
+
+- **Retired:** 2026-08-30
+- **Reason:** Replaced by Flightdeck itself.
diff --git a/apps/semaphore/docker-compose.yml b/apps/semaphore/docker-compose.yml
deleted file mode 100644
index be4038a..0000000
--- a/apps/semaphore/docker-compose.yml
+++ /dev/null
@@ -1,33 +0,0 @@
-include:
-  - ../networks.yml
-  - ../postgres-17.yml
-x-vault-env: &vault-env
-  SEMAPHORE_ACCESS_KEY_ENCRYPTION: ${ENCRYPTION_KEY}
-  SEMAPHORE_DB_PASS: ${DATABASE_PASSWORD}
-  SEMAPHORE_ADMIN_PASSWORD: ${ADMIN_DEFAULT_PASS}
-  SEMAPHORE_ADMIN_EMAIL: ${ADMIN_MAIL}
-  SEMAPHORE_TELEGRAM_TOKEN: ${TELEGRAM_TOKEN}
-  SEMAPHORE_TELEGRAM_CHAT: ${TELEGRAM_CHAT}
-x-internal-env: &internal-env
-  SEMAPHORE_DB_DIALECT: postgres
-  SEMAPHORE_DB_HOST: postgres
-  SEMAPHORE_DB_NAME: ${APP_NAME}
-  SEMAPHORE_DB_USER: postgres
-  SEMAPHORE_ADMIN: admin
-  SEMAPHORE_ADMIN_NAME: admin
-  SEMAPHORE_TELEGRAM_ALERT: true
-  ANSIBLE_HOST_KEY_CHECKING: false
-services:
-  semaphore:
-    image: semaphoreui/semaphore
-    extends:
-      file: ../common.yml
-      service: main
-    expose:
-      - 3000
-    labels:
-      - "traefik.http.services.${APP_NAME}.loadbalancer.server.port=3000"
-    environment:
-      <<: [*vault-env, *internal-env]
-    depends_on:
-      - postgres